Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa
File:                     1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa (raw, json)
Hash identifier:          3gPbG2alr3A2jnCf2hgy79Xm+PtEC0fXgvIk3LTGN4Q=
Subject key identifier:   96:1B:F7:E6:2E:8D:CD:D7:62:65:61:59:A0:F6:84:2E:E8:FD:73:20
Certificate issuer:       /CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
Certificate serial:       010D0C9F4328584B153C15481E442ACD8C6A7080
Authority key identifier: 0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa
Signing time:             Thu 04 Sep 2025 13:00:41 +0000
ROA not before:           Thu 04 Sep 2025 13:00:41 +0000
ROA not after:            Wed 03 Dec 2025 14:00:41 +0000
asID:                     53727
IP address blocks:        23.172.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 16 Sep 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:15:3c:15:48:1e:44:2a:cd:8c:6a:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b42cd78d-c3f1-471a-931a-26eaf5a872f3
        Validity
            Not Before: Sep  4 13:00:41 2025 GMT
            Not After : Dec  3 14:00:41 2025 GMT
        Subject: CN=72b993d8-931b-44b4-ab70-199486084d4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2a:1b:59:10:f8:7f:ce:1f:4d:0f:7b:f4:bb:
                    e4:1c:07:59:85:4f:d2:0a:4b:84:4c:cd:11:fc:15:
                    47:a7:50:75:7a:62:d3:23:05:d8:ad:ed:f0:8b:d9:
                    9a:c1:bb:0c:19:2d:f6:79:46:af:35:33:13:56:2b:
                    33:ca:bf:c8:71:43:2a:fc:ca:72:d4:6d:1b:a7:36:
                    99:ad:4b:f5:bd:50:ba:02:70:e9:43:fe:ee:ed:3d:
                    9f:28:6c:72:75:9d:95:2c:69:3c:7f:6d:4e:04:6f:
                    f1:b4:5e:9d:71:3f:e4:78:5e:46:55:8a:f3:f1:49:
                    bd:84:f5:39:4d:96:77:dc:13:0a:d0:22:08:b6:41:
                    7d:da:cd:34:23:f1:a4:0a:0d:de:c4:41:29:43:c4:
                    94:bd:de:83:39:ef:23:b2:62:e5:92:e4:cb:09:55:
                    d5:64:57:6b:c7:53:eb:2b:c6:9b:76:0e:b4:16:10:
                    30:88:49:63:1e:4a:26:d6:cf:dd:77:a2:81:a3:7f:
                    e6:36:8e:c9:25:94:f6:d6:d5:f4:71:b2:d0:b9:a7:
                    73:74:4f:8d:2d:a6:aa:f9:97:aa:6e:05:a4:5a:40:
                    ed:52:cc:b9:64:56:86:1f:b7:a5:cb:cb:a2:f5:81:
                    47:e3:ed:be:70:9b:4e:3b:a5:8f:25:d7:6e:04:fb:
                    28:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:1B:F7:E6:2E:8D:CD:D7:62:65:61:59:A0:F6:84:2E:E8:FD:73:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/1652fdb9-05d0-3c4c-a3f6-1debfcfb924e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3/b42cd78d-c3f1-471a-931a-26eaf5a872f3.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F3:1E:F6:71:CB:5B:F5:26:03:2D:37:EE:66:DD:C8:8B:6D:54:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b42cd78d-c3f1-471a-931a-26eaf5a872f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.172.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:bd:f2:78:65:9b:bd:e3:f2:e0:78:8a:00:65:c0:e3:de:ba:
         64:6d:3b:62:e3:cb:91:7f:f6:05:8f:54:b3:38:57:1b:98:21:
         b7:4a:9a:5a:f4:57:fc:ae:9a:c0:b4:f7:54:5e:c6:22:37:75:
         3f:5b:95:06:72:40:4a:0f:32:4b:09:f4:21:7e:ab:f3:5d:b8:
         e6:db:da:ba:85:fd:73:40:6f:02:15:e7:80:7e:d4:fb:1b:d4:
         61:40:87:b6:d0:9f:ad:cc:0d:90:9a:c4:a4:6d:74:42:c2:8a:
         a8:1b:83:19:c9:e4:42:48:d9:e3:13:43:03:77:ad:9b:0a:a3:
         58:74:c7:b0:fa:1e:3d:a8:92:da:50:93:07:15:c3:95:00:26:
         a3:e6:c0:be:b6:2e:cd:68:73:66:03:6a:dc:ac:83:da:0a:f2:
         e1:a0:8e:3e:7a:cd:02:f1:4d:ef:98:e7:a4:74:2a:21:73:37:
         85:72:86:09:6c:06:e6:7d:73:4d:08:02:57:5c:f6:ec:3f:1e:
         71:94:67:37:71:82:1e:71:17:d9:8c:fc:13:7e:01:5f:a8:ed:
         e1:80:c8:b1:b1:41:3b:4a:a1:57:7a:41:9d:26:d0:ce:84:4f:
         6c:bb:ec:02:0a:ce:83:d3:17:8b:5b:53:23:a9:ac:a8:57:da:
         62:02:d1:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 15 07:48:51 2025 by rpki-client